EU AI Act update: Regulation (EU) 2026/1744 was published in the Official Journal on 24 July 2026 and entered into force on 27 July 2026. Check the consolidated AI Act and route-specific application dates before relying on older timelines. Consolidated AI Act EU AI Act update: Regulation (EU) 2026/1744 is in force; check route-specific application dates. Consolidated AI Act
Draft Commission guidance tracker

EU AI Act High-Risk Classification Router

Use this local browser router to decide which high-risk review path an AI system should enter: Annex I product or safety-component review, Annex III use-case review, possible Article 6(3) filter assessment, or vendor/legal review.

Limit: this page produces an operational triage record. It does not provide legal advice, certify compliance, or replace review by qualified counsel or the relevant authority.

Latest source reviewed

Article 6 routing plus current statutory dates

This router uses Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744 and the Commission draft high-risk classification guidelines published on 19 May 2026. It keeps classification triage separate from date mapping: Article 6(2) / Annex III systems are mapped to 2 December 2027, while Article 6(1) / Annex I product-integrated systems are mapped to 2 August 2028.

Source status for this routerRegulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744 is the current legal baseline; the consolidated text is current from 27 July 2026. Regulation (EU) 2026/1744 is published and in force. The classification guidance remains draft, non-binding and non-exhaustive; its consultation closed on 23 July 2026. This router does not issue a legal classification, compliance guarantee, or final date opinion.

Open Regulation (EU) 2026/1744
Open Commission draft guidelines
Open consultation record
Decision routes

Route the system before you argue the answer.

High-risk classification starts with the route. Product-integrated AI, Annex III people-impact use cases, narrow Article 6(3) derogation arguments, and incomplete vendor files require different evidence records.

Annex I product route

Use this path when the AI system is itself an Annex I product or is intended as its safety component, and verify whether the relevant product requires third-party conformity assessment.

Annex III use-case route

Use this path when the intended purpose matches a listed Annex III use case. An industry or area label alone is not enough.

Article 6(3) derogation filter

Use this path only for an Annex III system where the no-significant-risk condition and at least one statutory task condition may be met. Profiling prevents reliance on this derogation.

AI SEO extraction block

What the draft guidance changes for practical triage

This table is written for both human readers and AI answer engines. Each row gives a direct classification signal and the operational action to record.

Intended purpose mattersCheck the system description, instructions, marketing claims, sales materials, terms, and technical documentation. Do not classify only from the buyer’s internal label.
Routes are independentAssess possible Article 6(1)/Annex I and Article 6(2)/Annex III routes separately. One route does not suppress the other.
Human review is not a shortcutRecord how the AI output influences the human decision. Human review may support oversight, but it does not automatically remove high-risk review.
Article 6(3) is a downstream recordThe router only identifies when the Annex III-only Article 6(3) derogation may need review. Build the detailed rationale on the Article 6(3) Filter Decision Record page.
Profiling has a defined scopeFor an Annex III system, profiling of natural persons prevents reliance on Article 6(3). Profiling alone does not place every AI system in Annex III or make it high-risk.
Split workflows still countDraft Commission guidance recommends assessing connected components as a complete workflow. Treat that interpretation as draft, non-binding support rather than a statutory branch.
Interactive router

Build a high-risk classification triage record.

Answer 13 questions. The result gives a review route, triggered factors, evidence to retain, vendor questions, and the next EU AI Compass tool to open.

13 questionsBrowser-basedNot legal advice

Prerequisite: this router does not assess or clear Article 5 prohibited practices. Check Article 5 separately before relying on an Article 6 route.

System identity

Use a non-confidential description. Do not paste personal data, trade secrets, credentials, or client-sensitive information.

Annex I product route

Annex III use-case route

Select every area that may apply. Leave blank only when none is reasonably indicated.

Article 6(3), profiling, and complex workflow checks

Include connected models, agents, tools, rules, data transformations, and human handoffs.

This tool runs in the browser. Use working names or redacted summaries. Do not enter confidential, personal, regulated, privileged, customer, or production data.

High-risk classification questions

These answers cover the router’s scope, limits, evidence outputs, and the common mistake of treating human review as a classification shortcut.

No. The EU AI Act High-Risk Classification Router gives an operational triage route based on the information entered and the source basis reviewed. It does not provide legal advice, certify compliance, or make a final classification decision.

The router evaluates possible Article 6(1)/Annex I and Article 6(2)/Annex III routes independently, then considers Article 6(3) only for an indicated Annex III route. It does not assess or clear Article 5 prohibited practices. The output is a review route, not a legal conclusion.

No. Human review may matter for governance and oversight, but human review alone does not automatically remove an AI system from high-risk review. Intended purpose, use context, profiling, and decision influence still need to be checked.

The Article 6(3) filter is a downstream review path for some Annex III systems. The router only flags when that path may need review. Use the Article 6(3) Filter Decision Record to document task type, profiling, material influence, human assessment, and evidence gaps.

Intended purpose matters because classification review looks at what the AI system is designed, documented, marketed, sold, and used to do. Product documentation, instructions, sales materials, and technical descriptions can widen or narrow the review route.

Keep the intended-purpose statement, role assumption, Annex I or Annex III route rationale, Article 6(3) filter rationale where relevant, vendor documentation, human oversight note, profiling note, reviewer name, and review date.

Use the result as a routing record, not a final answer.

Run the router, then move the output into an inventory entry, vendor evidence request, or deployer evidence file. Complex systems, product-integrated AI, agentic workflows, profiling, or contested Article 6(3) positions need qualified review.

Run another system

Source basis and limits: This page is based on the consolidated Regulation (EU) 2024/1689 dated 27 July 2026, Regulation (EU) 2026/1744, and the European Commission draft guidelines on high-risk AI classification published on 19 May 2026. The draft guidance is non-binding and its examples are non-exhaustive; the consultation closed on 23 July 2026. Article 6(2)/Annex III provisions apply from 2 December 2027 and Article 6(1)/Annex I provisions apply from 2 August 2028. Last reviewed: 3 September 2026. This page is educational and operational triage only. It is not legal advice, official EU guidance, conformity assessment, certification, or a compliance guarantee. Consult qualified legal, privacy, sector, product-safety, or security professionals before making binding decisions.